A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-develUpgrade libsmbclient-develUpgrade libwbclient-devel | May 4, 2022 | May 5, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 5, 2021 |
| Amazon Linux Ami 2 | — | Upgrade samba-clientUpgrade ctdbUpgrade samba-python-testUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-pidlUpgrade samba-common-toolsUpgrade samba-testUpgrade libwbclientUpgrade sambaUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-client-libs | Jul 2, 2021 | May 5, 2021 |
| Amazon_linux | — | Upgrade samba | Feb 19, 2022 | Apr 29, 2021 |
| Centos_linux | — | Upgrade samba-common-libs-debuginfoUpgrade libwbclient-develUpgrade ctdb-tests-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-debugsourceUpgrade samba-dcUpgrade samba-common-tools-debuginfoUpgrade ctdb-testsUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-python-testUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-testUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-test-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade libsmbclient-debuginfoUpgrade samba-libs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-dc-libsUpgrade ctdbUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winexeUpgrade samba-debuginfoUpgrade python3-samba-testUpgrade libwbclientUpgrade samba-client-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libsmbclientUpgrade libsmbclient-develUpgrade samba-commonUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modules-debuginfo | Jun 9, 2021 | May 5, 2021 |
| Debian | — | Upgrade samba | May 31, 2021 | May 5, 2021 |
| Freebsd | — | Upgrade samba412Upgrade samba414Upgrade samba413 | Nov 4, 2022 | May 1, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sambaUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade sambaUpgrade samba-commonUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-clients | Oct 26, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-common-tools | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-pidlUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-common-libsUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclientUpgrade samba-libsUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade ctdbUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-commonUpgrade python2-sambaUpgrade samba-common-toolsUpgrade samba-winbind | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-clientUpgrade samba-libs | Aug 10, 2021 | May 5, 2021 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 5, 2021 |
| Oracle_linux | — | Upgrade ctdbUpgrade ctdb-testsUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-python-testUpgrade samba-develUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclientUpgrade libwbclient-develUpgrade sambaUpgrade samba-pidlUpgrade samba-winexeUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade python3-sambaUpgrade python3-samba-testUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-client-libs | Jun 10, 2021 | Apr 29, 2021 |
| Qnap Qts | — | Upgrade QNAP QTS to the latest version | Aug 4, 2025 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-develUpgrade samba-test-libsUpgrade samba-winexe-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-libsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-sambaUpgrade libsmbclient-debuginfoUpgrade samba-pidlNo solution existsUpgrade samba-common-tools-debuginfoUpgrade samba-test-debuginfoUpgrade ctdbUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade ctdb-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-dcUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-common-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade libwbclient-debuginfoUpgrade samba-common-toolsUpgrade samba-python-testUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade samba-debugsourceUpgrade samba-winexe | Jun 9, 2021 | May 5, 2021 |
| Rocky_linux | — | Upgrade python3-sambaUpgrade samba-common-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-krb5-printingUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade ctdb-debuginfoUpgrade ctdb-testsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbindUpgrade ctdb-tests-debuginfoUpgrade sambaUpgrade libsmbclient-develUpgrade samba-test-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-debuginfoUpgrade libwbclient-develUpgrade samba-winexeUpgrade python3-samba-debuginfoUpgrade samba-develUpgrade samba-test-libs-debuginfoUpgrade python3-samba-testUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libsmbclientUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-debugsourceUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-client-debuginfo | May 5, 2022 | May 5, 2021 |
| Samba | — | Upgrade to Samba 4.14.4 or later.Upgrade to Samba 4.13.8 or later.Upgrade to Samba 4.12.15 or later. | Jun 11, 2021 | May 5, 2021 |
| Suse | — | Upgrade libsamdb0-32bitUpgrade libndr0Upgrade libsamba-policy-python3-develUpgrade samba-client-libs-32bitUpgrade libdcerpc0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-develUpgrade libsmbclient0-32bitUpgrade libdcerpc-samr0Upgrade samba-ad-dc-32bitUpgrade samba-libsUpgrade samba-testUpgrade libndr1Upgrade libsmbclient-develUpgrade libsamba-util0Upgrade libwbclient0Upgrade samba-libs-32bitUpgrade libndr-standard-develUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy-develUpgrade libndr-standard0Upgrade libtdb1Upgrade samba-clientUpgrade libsamba-util-develUpgrade libsamba-passdb-develUpgrade libnetapi-develUpgrade libsamba-credentials0Upgrade samba-krb-printingUpgrade libndr0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-libs-pythonUpgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsmbconf0Upgrade libtevent-util-develUpgrade libnetapi0-32bitUpgrade libsmbldap2Upgrade libsamba-hostconfig0Upgrade samba-client-32bitUpgrade libldb1Upgrade libsamdb-develUpgrade ctdbUpgrade libsamba-errors-develUpgrade libtevent0Upgrade libtevent0-32bitUpgrade libsmbclient0Upgrade libsamba-hostconfig-develUpgrade libsamba-passdb0-32bitUpgrade libnetapi0Upgrade libdcerpc-samr0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-atsvc0Upgrade samba-docUpgrade samba-winbind-32bitUpgrade libtdb1-32bitUpgrade libdcerpc-binding0Upgrade samba-32bitUpgrade libwbclient0-32bitUpgrade libsamba-passdb0Upgrade libtalloc2-32bitUpgrade libsamba-policy0Upgrade libnetapi-devel-32bitUpgrade libndr-develUpgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libtevent-util0Upgrade libsamba-errors0Upgrade samba-libs-python3-32bitUpgrade samba-ldb-ldapUpgrade libsmbldap2-32bitUpgrade libsmbconf-develUpgrade samba-python3Upgrade libsmbldap-develUpgrade libndr1-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-credentials-develUpgrade samba-pythonUpgrade samba-ad-dc-libsUpgrade samba-winbind-libs-32bitUpgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade ldapsmbUpgrade samba-core-develUpgrade samba-winbindUpgrade libsamba-hostconfig0-32bitUpgrade samba-client-libsUpgrade libndr-krb5pac0Upgrade samba-cephUpgrade libdcerpc-develUpgrade samba-gpupdateUpgrade samba-winbind-libsUpgrade libtalloc2Upgrade samba-dsdb-modulesUpgrade samba-ad-dcUpgrade sambaUpgrade libsmbldap0Upgrade ctdb-testsUpgrade libwbclient-develUpgrade libndr-nbt0Upgrade libndr-standard0-32bit | Apr 30, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Apr 30, 2021 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub